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User Logs into a First Vendor and Transmits Identification 
Information 
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The First Vendor Transmits the Identification Information to an 
Authentication Site 
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The Authentication Site Verifies the Identification Information i ^ 
and Generates a User Session Key and a Second Site's Site ' ^03 
Key, which are Transmitted to the User through the First Vendor 



The Authentication Site Stores the Identification Information, 
User Session Key, and Second Site's Site Key 



The User Logs into a Second Vendor and Transmits the User 
Session Key 
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The Second Vendor Transmits the User Session Key to the 
Authentication Site 



The Authentication Site Verifies the User Session Key from the 
Stored User Session Key 
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The Authentication Site Transmits the Stored Second Site's Site 
Key to the User Through the Second Vendor 
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FIG. 3 
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